Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
File:                     ZhBOT32fONjiKi0yvgGQMZMMGkc.mft (raw, json)
Hash identifier:          /roUfGwE9IT5aKNqg9xg26KSxLAuMy+6MotQiomD9Ic=
Subject key identifier:   2A:4B:12:C4:C9:C4:FC:EB:4D:C1:2F:A9:D2:9A:45:70:E8:D1:81:4F
Authority key identifier: 66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47
Certificate issuer:       /CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
Certificate serial:       0194BC04E823506AD3A557E39F615ABE53AF
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft
Manifest number:          142B
Signing time:             Fri 31 Jan 2025 11:00:25 +0000
Manifest this update:     Fri 31 Jan 2025 11:00:25 +0000
Manifest next update:     Sat 01 Feb 2025 11:00:25 +0000
Files and hashes:         1: CBx-FeJj7z4oTrZiVmY-MbHnzM4.roa (hash: 1bONPKFzyDS/3APoxZR25vqyDAsgCQifSMXpTfL4F0s=)
                          2: WxxzockSF-0jbEBubYwjKIfgtaw.roa (hash: uNom3cZ42KKzlsjBXTYNfCi+Ksse/PrjCfplRbo7jWE=)
                          3: ZhBOT32fONjiKi0yvgGQMZMMGkc.crl (hash: Glpt/H+c/MrkrBsKhrGo0g2NjMw/YRRoNUnTcUvbIwg=)
                          4: hAuohYiSHygUFUxTjuX1SWN5QDE.roa (hash: MotGMSUysnMBdzXEwoyDH1EBq/l4jrQRez7lyisrMeA=)
                          5: n6ANVJpjfADW-mInHpVlhLdkL5w.roa (hash: E28ZlsfhOnBkyIyOKkYfx6xyMrKE5R52d/SAANOKtIs=)
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:94:bc:04:e8:23:50:6a:d3:a5:57:e3:9f:61:5a:be:53:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66104e4f7d9f38d8e22a2d32be019031930c1a47
        Validity
            Not Before: Jan 31 11:00:25 2025 GMT
            Not After : Feb  1 11:00:25 2025 GMT
        Subject: CN=2a4b12c4c9c4fceb4dc12fa9d29a4570e8d1814f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:97:2f:af:bf:d3:51:67:cf:53:c4:1c:5f:e2:
                    30:03:d5:94:d2:d1:78:17:7d:cb:97:d1:44:7f:40:
                    28:31:26:b1:8a:13:92:45:b2:5f:b1:b2:69:16:a4:
                    d1:31:e9:7f:78:58:df:1c:3d:89:58:8d:8c:7d:82:
                    1c:50:a1:2b:a8:3a:12:f8:02:84:03:30:d0:13:55:
                    f3:3a:70:c2:b0:14:a1:40:85:0a:3e:09:5a:77:a2:
                    ba:38:81:a4:92:2f:fc:74:f2:5f:27:1d:21:d5:16:
                    a9:50:77:2f:29:52:ce:d7:0f:9c:c9:05:fe:a6:42:
                    26:54:51:7a:7a:0a:0e:61:8a:29:93:c4:00:25:27:
                    e6:b7:d4:c2:b1:b0:5b:9d:c0:6d:d7:32:12:bb:3f:
                    b4:2d:9d:26:38:da:7f:0b:d6:54:be:68:0e:43:f0:
                    83:64:02:4d:bf:c1:85:04:91:05:97:fb:bf:e9:96:
                    5f:72:b3:df:3a:1f:88:bb:a2:ba:a7:47:4c:90:14:
                    f4:a3:bc:f3:0f:cc:12:84:78:96:f3:60:9e:b8:ed:
                    64:2a:c1:d4:62:92:6c:5a:ff:2a:3a:c7:3e:c0:64:
                    89:0a:e3:77:64:41:1d:e7:1f:b3:7c:4c:f7:52:c9:
                    24:aa:a2:1b:5d:7e:d7:fe:9e:07:f4:4a:ad:84:27:
                    22:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:4B:12:C4:C9:C4:FC:EB:4D:C1:2F:A9:D2:9A:45:70:E8:D1:81:4F
            X509v3 Authority Key Identifier:
                keyid:66:10:4E:4F:7D:9F:38:D8:E2:2A:2D:32:BE:01:90:31:93:0C:1A:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZhBOT32fONjiKi0yvgGQMZMMGkc.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/82d222-2202-45f2-b904-47472ed3becb/1/ZhBOT32fONjiKi0yvgGQMZMMGkc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         2a:4c:0c:7b:74:42:b6:f1:d5:ac:27:32:14:dc:01:17:b6:5e:
         97:f2:a3:aa:fb:4d:74:b4:09:af:32:eb:62:35:8e:ff:50:41:
         9f:61:cd:2b:0c:8c:f2:83:aa:f9:73:31:81:b9:39:f4:6a:22:
         ba:53:b5:d7:7c:f4:f0:1e:35:c6:19:4a:d6:f8:db:93:11:6e:
         3c:dc:a6:5f:3f:5c:e4:af:af:c8:03:ed:dc:50:4e:67:ec:37:
         31:aa:9a:44:7a:d6:e7:83:a4:28:ce:20:0a:98:56:96:27:e4:
         e7:43:4b:c3:b7:5b:d9:bb:6b:ce:59:4f:a6:1a:49:90:13:76:
         24:81:99:ae:c1:59:2f:c5:db:10:b9:94:b4:c3:41:32:91:54:
         10:90:dd:50:06:7b:f7:8f:35:73:2f:f3:23:b1:af:83:6a:1c:
         d7:57:30:81:b2:ac:4a:e5:03:ee:dc:ce:9f:6e:ec:4f:84:06:
         57:09:65:dd:2c:bf:69:72:cc:82:68:4b:c5:f9:6f:7d:04:25:
         6e:48:67:50:d5:30:21:78:d5:d4:8f:02:c0:06:bd:33:3e:8d:
         87:0a:d4:ef:dc:be:a8:e8:ce:20:11:68:34:34:ec:7e:50:ec:
         41:39:c6:ff:fd:5f:fa:c9:12:20:99:5b:f9:21:b7:03:81:13:
         01:46:93:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----